6c7eb9068d3e7097aa3889a3d19de667 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c7eb9068d3e7097aa3889a3d19de667
Size

63KB
MD5

6c7eb9068d3e7097aa3889a3d19de667
SHA1

1629fd49ab124e9e2c5998e94ba38180ad63dc34
SHA256

42d4afe8f663cd0ede5e7aaa3e263d70450b4f082d78f6a374043100b06676b8
SHA512

0d232631aa160177d562664331649bab16a1c48bf4748c8d7f5bef8f0de08e9e658a3fc1d71e935e00bad069a3095ead280efdb06e397701677b243159eca047
SSDEEP

1536:bnHsGOCqarm2euXqdddddddddddddddddddddddddddddddddddddddddddddddE:rMGOTvQXNJNdj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c7eb9068d3e7097aa3889a3d19de667

Files

6c7eb9068d3e7097aa3889a3d19de667
.exe windows:4 windows x86 arch:x86

3f3ad6165d4735a58f98c0ee207b2ae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
IsBadStringPtrW
lstrlen
HeapCreate
PulseEvent
FindClose
TlsGetValue
CloseHandle
CreateFileA
GetACP
TerminateThread
GetModuleHandleA
GetEnvironmentVariableA
Sleep
CreateMutexA
ReleaseMutex
LoadLibraryW
GlobalUnlock
LocalFree
FindResourceA

user32

SetFocus
GetDlgItem
CopyRect
CallWindowProcA
DefWindowProcW
GetDC
GetIconInfo
FillRect
DrawMenuBar
DispatchMessageA
CheckRadioButton
DrawEdge
IsWindow

msasn1

ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecBool
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE